[Unit]
Description=RemoteDesk graphical user-session agent
PartOf=graphical-session.target
After=graphical-session-pre.target

[Service]
Type=simple
ExecStart=/usr/bin/remotedesk-agent-session serve --ipc-socket /run/remotedesk/agentd.sock
Restart=on-failure
RestartSec=5s
NoNewPrivileges=yes
PrivateTmp=yes
BindReadOnlyPaths=-/tmp/.X11-unix
ProtectSystem=strict
ProtectHome=read-only
RestrictAddressFamilies=AF_UNIX
LockPersonality=yes

[Install]
WantedBy=default.target